Archive
January 2012
Vulnerabilities first published in this month (UTC), newest first.
314 results · Feed
-
Unscored —CVE-2011-4898 Public exploit
wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier generates different error messag…
-
Unscored —CVE-2011-4899 Public exploit
wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not ensure that the specifi…
-
Unscored —CVE-2012-0937 Public exploit
wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limit the number of MyS…
-
Unscored —CVE-2012-0782 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/setup-config.php in the installation component in WordP…
-
Unscored —
Memory leak in smbd in Samba 3.6.x before 3.6.3 allows remote attackers to cause a denial of service (memory and CPU co…
-
Unscored —CVE-2011-4337 Public exploit
Static code injection vulnerability in translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows re…
-
Unscored —CVE-2011-5072 Public exploit
Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow remote attackers to exe…
-
Unscored —CVE-2011-5073 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow remote att…
-
Unscored —CVE-2011-5075 Public exploit
translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to obtain sensitive info…
-
Unscored —CVE-2011-5074 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow rem…
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.php in Support Incident Tracker (aka SiT!) 3.65 allows remote attack…
-
Unscored —
SQL injection vulnerability in incident_attachments.php in Support Incident Tracker (aka SiT!) 3.65 allows remote attac…
-
Unscored —
Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote…
-
Unscored —
Eval injection vulnerability in config.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated admi…
-
Unscored —
ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive i…
-
Unscored —
Unrestricted file upload vulnerability in incident_attachments.php in Support Incident Tracker (aka SiT!) 3.65 allows r…
-
Unscored —
move_uploaded_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitiv…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) 3.65 allow remote att…
-
Unscored —CVE-2011-5071 Public exploit
Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.64 allow remote attackers to exe…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Support Incident Tracker (aka SiT!) 3.65 allow remote attackers …
-
Unscored —CVE-2012-0932 Public exploit
Cross-site scripting (XSS) vulnerability in admin/login.php in Lead Capture Page System allows remote attackers to inje…
-
Unscored —CVE-2012-0935 Public exploit
SQL injection vulnerability in Default.aspx in Aryadad CMS allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.ja…
-
Unscored —CVE-2012-0933 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Acidcat CMS 3.5.1, 3.5.2, 3.5.6, and possibly earlier allow remo…
-
Unscored —
PHP remote file inclusion vulnerability in ajax/savetag.php in the Theme Tuner plugin for WordPress before 0.8 allows r…
-
Unscored —CVE-2012-0021 EPSS 30%
The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server 2.2.17 through 2.2.2…
-
Unscored —
protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construc…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Schneider Electric Modicon Quantum PLC allows remote attackers to inject ar…
-
Unscored —
Multiple buffer overflows in Schneider Electric Modicon Quantum PLC allow remote attackers to cause a denial of service…
-
Unscored —
Schneider Electric Modicon Quantum PLC does not perform authentication between the Unity software and PLC, which allows…
-
Medium 6.5
The auth_parse_options function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing auth…
-
Unscored —
The tpm_read function in the Linux kernel 2.6 does not properly clear memory, which might allow local users to read the…
-
Unscored —
mod_cluster in JBoss Enterprise Application Platform 5.1.2 for Red Hat Linux allows worker nodes to register with arbit…
-
Unscored —
The cleanup_journal_tail function in the Journaling Block Device (JBD) functionality in the Linux kernel 2.6 allows loc…
-
Medium —
OpenID4Java does not verify that Attribute Exchange (AX) information is signed
message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay Framework before 1.0.2, and possibly other products does not verify that Attribute Exchange (AX) information is signed, …
-
Unscored —
Stack-based buffer overflow in the hfs_mac2asc function in fs/hfs/trans.c in the Linux kernel 2.6 allows local users to…
-
Unscored —
The create_pit_timer function in arch/x86/kvm/i8254.c in KVM 83, and possibly other versions, does not properly handle …
-
Unscored —
Buffer overflow in the xfs_readlink function in fs/xfs/xfs_vnodeops.c in XFS in the Linux kernel 2.6, when CONFIG_XFS_D…
-
Unscored —
The NFS implementation in Linux kernel before 2.6.31-rc6 calls certain functions without properly initializing certain …
-
Unscored —
The user_update function in security/keys/user_defined.c in the Linux kernel 2.6 allows local users to cause a denial o…